* Tweak – Improve handling of onboarding admin requests

* Tweak – Improve handling of provider configuration requests
* Tweak – Refine matching against existing accounts during social login

*Update: ANTIFRAUD-270 – Added protection against WooCommerce Add Payment Method and Braintree verification abuse
*Update: ANTIFRAUD-283 – Made PayPal Checkout Hardening CAPTCHA provider-agnostic and added Cloudflare Turnstile support
*Update: ANTIFRAUD-284 – Prevented legitimate third-party/API order flows, including LitCommerce, NetSuite, and ClassWallet, from being incorrectly blocked
*Update: ANTIFRAUD-291 – Improved card-testing detection and enforcement to better protect against repeated payment attempts
*Fix: ANTIFRAUD-292 – Fixed failed card attempts being counted before gateway processing, ensuring configured card-testing limits are enforced correctly
*Fix: ANTIFRAUD-308 – Fixed pre-payment checks incorrectly rejecting orders below the configured High Risk threshold
*Fix: ANTIFRAUD-311 – Fixed imported Etsy orders being incorrectly identified as Unknown Origin during scheduled fraud checks
*Fix: ANTIFRAUD-336 – Fixed a logger issue that could cause a fatal error and take the site offline
*Fix: ANTIFRAUD-334 – Addressed customer-reported issues in Anti-Fraud 8.0.6 to improve stability and reliability

* Tweak – Popups with no content no longer display on the storefront
* Fix – Popups published before their settings were first saved never displayed on the storefront
* Fix – Per-popup overlay opacity started at 0 instead of the global default
* Fix – Cart total popups didn't show on page load when the classic cart was already over the threshold, and misread some currency formats

* Tweak – Improve handling of Intuit account connection requests
* Dev – The legacy `WC_Intuit_Payments::decrypt_credential_legacy()` method is now non-functional and will be entirely removed in a future version